Principal FedRAMP Moderate Compliance Analyst

Elasticsearch B.V.; Northern (KY); Hybrid; USD 160,000 - 253,000; Full time

Benefits offered by this job

Health coverage

Flexible locations

Vacation days

Donation matching

Volunteer hours

Parental leave

Job summary

Elastic, the Search AI Company, seeks a Principal Security Compliance Analyst to lead the FedRAMP Moderate program and oversee continuous monitoring. You will coordinate with 3PAOs, federal partners, and internal teams to ensure documentation and evidence meet regulatory standards.

You will manage findings, maintain SSPs, and guide control owners across Security, Engineering, IT, Product, and Legal while tracking deadlines and risk metrics.

Qualifications

• 5+ years of experience managing or supporting a FedRAMP Moderate program.
• Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requirements.
• Experience with SSPs, POA&M, control evidence, vulnerability management, and security assessments.
• Strong project-management and organizational skills.
• Ability to communicate effectively with technical teams, auditors, government stakeholders, and company leadership.

Responsibilities

• Manage the FedRAMP Moderate authorization and continuous monitoring program.
• Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other required documentation.
• Coordinate assessments and reviews with our 3PAO, federal agency partners, consultants, and internal teams.
• Track security findings and POA&M items through remediation.
• Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls.
• Monitor program deadlines, risks, and compliance metrics and report progress to leadership.
• Review system and product changes for potential FedRAMP impact.
• Help control owners understand their responsibilities and prepare appropriate evidence.

Skills

FedRAMP Moderate

NIST SP 800-53

POA&M

SSP

Vulnerability management

Audit coordination

Project management

Tools

SSP templates

Job description

Elastic, the Search AI Company, seeks a Principal Security Compliance Analyst to lead the FedRAMP Moderate program and oversee continuous monitoring. You will coordinate with 3PAOs, federal partners, and internal teams to ensure documentation and evidence meet regulatory standards.

You will manage findings, maintain SSPs, and guide control owners across Security, Engineering, IT, Product, and Legal while tracking deadlines and risk metrics.